Merge pull request #207943 from batamig/patch-231

adding user requirements

Author: LJSpiller

articles/defender-for-iot/organizations/how-to-manage-cloud-alerts.md

@@ -143,6 +143,8 @@ On each alert details page, the **Take Action** tab lists recommended remediatio
 
 ## Manage alert status and severity
 
+**Prerequisite**: Subscription access as a **Security admin**, **Contributor**, or **Owner** user
+
 You can update alert status or severity for a single alert or for a group of alerts.
 
 *Learn* an alert to indicate to Defender for IoT that the detected network traffic is authorized. Learned alerts won't be triggered again the next time the same traffic is detected on your network. For more information, see [Learn and unlearn alert traffic](how-to-manage-the-alert-event.md#learn-and-unlearn-alert-traffic).
@@ -184,6 +186,8 @@ Alert management across all interfaces functions as follows:
 
 ## Access alert PCAP data (Public preview)
 
+**Prerequisite**: Subscription access as a **Security admin**, **Contributor**, or **Owner** user
+
 To access raw traffic files for your alert, known as packet capture files or PCAP files, select **Download PCAP** in the top-left corner of your alert details page.
 
 For example: